last executing test programs: 17.912542022s ago: executing program 4 (id=3760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 16.383269938s ago: executing program 4 (id=3763): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r8, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 15.971889196s ago: executing program 4 (id=3764): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) creat(0x0, 0x0) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r7, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001280), 0x6) 12.229872559s ago: executing program 2 (id=3773): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a20032000103000aff3f000057fc5ad90200bb6a880000d6c9db0000db15000200ff01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50c08af9b1c56", 0x82) 11.343190253s ago: executing program 2 (id=3776): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {}, 0x4}) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x8, @void}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4b3c341dd1700000002000000000000002369af6bc6889bdaff2600", "a1163939c79ca16c1ca4070039f3b628973705000000a974a0193b3e8772fd29f35239ce00000000000000000000000000000000000000008000", "24431a1e77a68e174f000000000000000010e200", [0x20000002]}}) 11.261327425s ago: executing program 4 (id=3777): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = syz_open_dev$dri(0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000e3ff00000000", @ANYRESOCT=r2, @ANYRES32=r0], 0x48) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000340)=ANY=[@ANYBLOB="04118f3bf57007fa3262fba10fba8d926e98ce043b0b8d728c45889e28aa2aeec3742a904f18c80b3cfc5c41bede6b18deeaee41cdd59ec35c9e6137d9d2c6b09429f97d704ab87ed0c857f23b885c8672e31f3fb0fd6969a86c696e21547b5e852a1c402046089189267d970ebe7544fb741bb4e78b25"], 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f0000000200)={0x3c61, 0x0, 0x1, 'queue1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 9.461026069s ago: executing program 2 (id=3780): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040001}, 0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) accept4$alg(r2, 0x0, 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000001, 0xffffffffffffffff, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x5, 0x4, 0x1) 7.684302022s ago: executing program 1 (id=3785): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x1a7, 0x0, &(0x7f0000000740)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 7.450326148s ago: executing program 1 (id=3786): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000440)=@nfs={0x90, 0x24, {0x69, 0x0, 0x7f, 0x80, "bc99de8489eb6d1f02a013be412d9126bb58e0e3702adff61f36ec5aa27f3e8888c1eee1f6b180bf01483d8ddda0dab264fc93fa582a610be462123ee0d95da15bee306defcf171643ff2aebe5df7252342e8b210157aad4a60131f9c124479bb03b9542eed75496a7fe5477ffff3081462282b203ea5d2868b3c85202369845"}}, 0x8000) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) statx(0xffffffffffffffff, 0x0, 0x400, 0x200, &(0x7f00000007c0)) stat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000e40)={0x20, 0x15, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_OBJ_NAME={0xfffffffffffffd91, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40040c1}, 0x40804) setns(0xffffffffffffffff, 0x24020000) 6.992773627s ago: executing program 1 (id=3787): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x3, 0x28, [0x80000001, 0x2, 0x5, 0x93], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ftruncate(r0, 0x8800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) 5.926013228s ago: executing program 2 (id=3789): socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0205710, &(0x7f00000004c0)={0x0, 0x83e56, 0x10, 0x0, 0x3}) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$evdev(0x0, 0x0, 0x48001) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1f1b", @ANYRESDEC=0x0], 0x22) 5.895081932s ago: executing program 3 (id=3790): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = syz_open_dev$dri(0x0, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000e3ff00000000", @ANYRESOCT=r2, @ANYRES32=r0], 0x48) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.889495349s ago: executing program 1 (id=3791): keyctl$clear(0x3, 0xfffffffffffffffd) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r1, 0x40045731, &(0x7f0000000140)=0x9) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000100)=0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigaction(0x16, 0x0, 0x0, 0x8, &(0x7f0000000440)) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0xc0002) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000080)={0x19}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r6, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r6, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r8, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r9, 0x0, 0x10000, 0x0, 0x0, 0x8000, 0x149ec7}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0x8, r9, 0x0, 0x9, 0xbd, &(0x7f0000000500)="37471b7ad35b4b2fe732eb896d77ca883a2813cab0416d1a4d3783ff0ed1633f8f2bd7aa48ff2d5d663062c74f6c9aa7ce860e2c4df2962d2f1c9a35426165ffab048c2f693779d5fb41de6d41ea880bdd86e32cb4059ae6494a4aef5d0fc43c6e5ab61047bad702f21a859926d7874f32e728fc8cd06418be6bcec27d8cd2bd2fda52471c637c9c232bfa64c16dcc3f694de47622edc3f28615580ecbb14233c660227d08c7c1572cd1b0c28fed32cc61b91c24f65498c6f2e74dc0ed", 0x4}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="050000dfffff060000002100000008000300", @ANYRES32=r10, @ANYBLOB="04002a0004002d80"], 0x24}}, 0x0) 4.92237596s ago: executing program 0 (id=3792): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200002000000000000000000000008500000041000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x1a9, 0x0, &(0x7f0000000740)="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", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.680730542s ago: executing program 3 (id=3793): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000100f00000000002a000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) userfaultfd(0x80001) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x0) keyctl$unlink(0x9, r7, 0xfffffffffffffffd) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 4.59647947s ago: executing program 4 (id=3794): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xe1, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000740)=""/14, 0xfef9) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 4.471551941s ago: executing program 0 (id=3795): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000020000000000000000000000085000000410000008500000050"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xd5, 0x0, &(0x7f0000000740)="6fd92f5c3fbecb0c72abdb6e3b92894fd70652cee2d9151356a81cccb527a2a318936ccee5adddb48f843b64e9e5cb87c8861a986afbcae602174c76e46c3d7ee59b50f9ada99335650fae3f0d7039b5a1644dd70bb59e1ac681d61adb8f59cbefc26cbc9cbc8ae922f3cb67922283890b914456c8f6f27d71903b6e59f19ec24d61ff563788e43b4bf6fb356d43902fc3d477c1750b0754b99892599e5e9007c7c30df968c334ae2888ee8596c4282e238e7123d6bd706d2492258caa0cfe9a6ab7a4a3912a2d9facf1f92720d6503fbb72a25141", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 4.453070538s ago: executing program 1 (id=3796): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000140)={0x0, 'team_slave_1\x00', {}, 0x4}) r3 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = dup(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x8, @void}, 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) r8 = openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000580)={r8, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4b3c341dd1700000002000000000000002369af6bc6889bdaff2600", "a1163939c79ca16c1ca4070039f3b628973705000000a974a0193b3e8772fd29f35239ce00000000000000000000000000000000000000008000", "24431a1e77a68e174f000000000000000010e200", [0x20000002]}}) 3.701541615s ago: executing program 0 (id=3797): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xe1, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xe) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 3.632754104s ago: executing program 3 (id=3798): socket$inet_tcp(0x2, 0x1, 0x0) ioprio_set$pid(0x0, 0xffffffffffffffff, 0x8008) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000380), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x1) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="842b75d65c94584b07004000"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000500)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xef7}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000200), 0x0) r4 = socket$packet(0x11, 0x3, 0x300) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042cbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040040}, 0x400a055) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 3.584814174s ago: executing program 4 (id=3799): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x7, {0x7, 0x1, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(0x0, 0x82, 0x2) r2 = dup(r1) syz_usb_disconnect(r0) read$char_usb(r2, 0x0, 0x0) 3.444654862s ago: executing program 0 (id=3800): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) landlock_create_ruleset(&(0x7f0000000180)={0x3012, 0x1, 0x2}, 0x3d, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000100f00000000002a000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_open_dev$dri(0x0, 0x3, 0x2c00) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c9d064bbd27b2aa57459cff33a3a9831ac46b8829b48fff3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$setperm(0x5, r7, 0x0) keyctl$unlink(0x9, r7, 0xfffffffffffffffd) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) 2.467756259s ago: executing program 3 (id=3801): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f00000001c0)={0x3, 0x28, [0x80000001, 0x2, 0x5, 0x93], &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000980)={[{0x2d, 'pids'}]}, 0x1f) ftruncate(r0, 0x8800000) sendfile(0xffffffffffffffff, r0, 0x0, 0x578410eb) 2.24269581s ago: executing program 0 (id=3802): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000080)={'vlan0\x00', 0x6}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000300)=0x9) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000008340)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4716e26b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb4f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0010000801964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x0, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x5, 0x0, 0x0, 0x8000, 0x0, 0x0, r7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000240)=0x0) io_submit(r9, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r8, &(0x7f0000000180)='\x00', 0x1001}]) dup3(r5, r8, 0x6700000000000000) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) 1.5163937s ago: executing program 3 (id=3803): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x11, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x202}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r8, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) write(r8, &(0x7f00000004c0)="dc4a9e9286e4949e611ad4dad0cc88614a4e03e404066d8971179b01685998e86b15e8e9904c89d5a534855e6a8ccf8249464a9110bb037590c7e53a7b7c85f26b73eb89bfc8f0104bac88d16016319cf3302dcec945bcc173d2ee158dd977e47ff850", 0x63) bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r7, &(0x7f0000001280), 0x6) 1.499388261s ago: executing program 2 (id=3804): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r2 = syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT, @ANYRESOCT=r0, @ANYBLOB="0000000000000000000000000000e3ff00000000", @ANYRESOCT=r2, @ANYRES32=r0], 0x48) write$binfmt_script(r0, &(0x7f0000002040)={'#! ', './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0'}, 0x1002) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.117716295s ago: executing program 3 (id=3805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x60b03, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_create(0x5, &(0x7f00000000c0)={0x0, 0x11, 0x800000000004, @thr={&(0x7f00000000c0), &(0x7f00000004c0)="b44d10286ef7d3d09cb61016f358e15307d560013340a15e00701ef338b4b03c092103bdee4bfcdaf1daaec757fe068fd7b14596d0058e20fd504fe23aae840ae1d9010000791b16643c9bc5aa301de247c659f29221c110e9be3b"}}, &(0x7f0000000200)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, 0x0) rseq(&(0x7f0000000080), 0xfffffffffffffdf3, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) pwrite64(r4, &(0x7f0000000540)="2db5eea6eea15d8f72c999a07277d1d7c979580d22f92ce0b1afa7bab3eb0104adfeeaa678f31a4db9de659ff42121bef148e18ae8d40801123e0315c8876846fef157bc3fe8", 0x46, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 501.151894ms ago: executing program 0 (id=3806): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x9d) sendmsg$BATADV_CMD_SET_MESH(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x42) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x24}, 0x0) unshare(0x24040000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000020017e9c0000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r5 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r5, 0x2284, &(0x7f0000000080)) unshare(0x2c020400) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r7, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 413.353003ms ago: executing program 1 (id=3807): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000001c0)}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x10, 0x0, r1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x70}, 0xc00) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2, 0x3a, ',[\\&-\x87\x81(.%-\\', 0x3a, '/', 0x3a, './file0', 0x3a, [0x43, 0x43]}, 0x36) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='B'], 0x4c}}, 0x0) write$binfmt_misc(r5, &(0x7f0000001280), 0x6) 0s ago: executing program 2 (id=3808): socket$inet(0x2, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x65e642, 0x0) socket$inet6(0xa, 0x80002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x108}}, 0x40440cc) msgsnd(0x0, &(0x7f0000000300)=ANY=[], 0x8, 0x800) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x8, 0x800) msgrcv(0x0, 0x0, 0x58, 0xffffff7f00000000, 0x800) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) kexec_load(0xfffffffffffffffd, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): 9741][T18385] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.564250][T18385] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1324.573256][T18385] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.002036][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.019086][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.048729][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1325.058095][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1325.075125][ T30] audit: type=1400 audit(1746283010.662:1436): avc: denied { mounton } for pid=18385 comm="syz-executor" path="/root/syzkaller.hUSSZO/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1325.247848][ T30] audit: type=1400 audit(1746283010.832:1437): avc: denied { mount } for pid=18385 comm="syz-executor" name="/" dev="gadgetfs" ino=6044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1325.782464][T18734] lo speed is unknown, defaulting to 1000 [ 1328.025909][T18763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2898'. [ 1328.335728][T18767] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18767 comm=syz.1.2898 [ 1330.097742][T18790] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2901'. [ 1330.270814][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 1330.372447][T18800] tipc: Started in network mode [ 1330.377399][T18800] tipc: Node identity ac1414aa, cluster identity 4711 [ 1330.509082][T18800] tipc: Enabled bearer , priority 10 [ 1330.561614][T18800] tipc: Enabled bearer , priority 0 [ 1331.650316][T15894] tipc: Node number set to 2886997162 [ 1333.811947][T18834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2910'. [ 1335.268594][T18841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2912'. [ 1335.306512][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2909'. [ 1335.328693][T18841] netlink: 'syz.0.2912': attribute type 5 has an invalid length. [ 1335.358387][T18826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2911'. [ 1335.428934][T18849] tipc: Enabling of bearer rejected, already enabled [ 1335.439744][T18849] tipc: Enabling of bearer rejected, failed to enable media [ 1335.560036][ T48] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1335.674764][T18841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2912'. [ 1335.712260][T18835] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2909'. [ 1335.751720][ T48] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 1335.777161][ T48] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1335.786349][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.909479][T18841] geneve3: entered promiscuous mode [ 1335.914882][T18841] geneve3: entered allmulticast mode [ 1336.171049][ T48] usb 5-1: Product: syz [ 1336.251978][T18835] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1336.261161][T18835] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1336.269945][ T48] usb 5-1: Manufacturer: syz [ 1336.280542][ T48] usb 5-1: SerialNumber: syz [ 1336.289165][T18835] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1336.341467][ T48] usb 5-1: config 0 descriptor?? [ 1336.353206][ T48] go7007-loader 5-1:0.0: can't handle multiple config [ 1336.361107][ T48] go7007-loader 5-1:0.0: probe failed [ 1336.542147][T18855] input: syz1 as /devices/virtual/input/input74 [ 1336.681719][T18835] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1336.791300][T18835] geneve4: entered promiscuous mode [ 1336.810394][T18835] geneve4: entered allmulticast mode [ 1338.747419][T15893] usb 5-1: USB disconnect, device number 22 [ 1338.760069][T15889] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1338.959888][T15889] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1339.061079][T15889] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1339.072243][T15889] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1339.100061][T15889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.133678][T15889] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1339.146336][T15889] usb 3-1: invalid MIDI out EP 0 [ 1339.636393][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.646140][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1339.659615][T18871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1339.744465][T18843] udevd[18843]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1339.868067][T15889] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1339.936452][T18871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1341.554165][T15889] usb 3-1: USB disconnect, device number 32 [ 1342.017542][T18907] lo speed is unknown, defaulting to 1000 [ 1342.761293][T18912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2927'. [ 1342.866204][T18912] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18912 comm=syz.2.2927 [ 1343.366016][T18921] 9pnet_virtio: no channels available for device syz [ 1343.805518][T18930] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1343.855007][T18930] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18930 comm=syz.0.2931 [ 1344.000108][T15894] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1345.384647][T15894] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 1345.416171][T15894] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1345.428978][T15894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1345.495666][T18939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2933'. [ 1345.877505][T15894] usb 3-1: Product: syz [ 1346.035725][T15894] usb 3-1: Manufacturer: syz [ 1346.048097][T15894] usb 3-1: SerialNumber: syz [ 1346.077519][T15894] usb 3-1: config 0 descriptor?? [ 1347.500243][T15893] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1347.511293][T15894] usb 3-1: can't set config #0, error -71 [ 1348.031888][T15894] usb 3-1: USB disconnect, device number 33 [ 1348.046642][T18959] fuse: Bad value for 'fd' [ 1348.140026][T15893] usb 2-1: Using ep0 maxpacket: 16 [ 1348.166607][T15893] usb 2-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1348.180180][T18961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1348.197153][T15893] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1348.216543][T18961] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1348.245033][T15893] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1348.265485][T15893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1348.326803][T15893] usb 2-1: config 0 descriptor?? [ 1348.780128][T15893] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1348.823772][T18970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1348.833203][T18970] netlink: 'syz.2.2940': attribute type 5 has an invalid length. [ 1348.866567][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2940'. [ 1348.933428][T15893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1348.944620][T15893] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1348.958062][T15893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1348.974366][T15893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1349.093387][T15893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1349.115569][T15893] usb 4-1: invalid MIDI out EP 0 [ 1349.450042][T18957] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1349.516112][T15893] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1349.573452][T18846] udevd[18846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.630160][T18957] usb 5-1: Using ep0 maxpacket: 16 [ 1349.667102][T18957] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1349.769529][T18957] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1349.820776][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1349.830400][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1349.946410][T18957] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1349.982003][T15893] usb 2-1: USB disconnect, device number 31 [ 1350.004489][T18957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.303925][T18957] usb 5-1: config 0 descriptor?? [ 1350.312467][T18969] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1350.326153][T18969] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1351.697444][T15893] usb 4-1: USB disconnect, device number 26 [ 1352.240039][T15893] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1352.480214][T15889] usb 5-1: USB disconnect, device number 23 [ 1352.640101][T15899] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1352.814688][T15893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1352.980022][T15893] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1352.990033][T15899] usb 1-1: Using ep0 maxpacket: 16 [ 1352.999447][T15893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1353.037442][T15893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.050052][T15899] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1353.090378][T15899] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1353.099929][T15893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1353.128665][T15893] usb 4-1: invalid MIDI out EP 0 [ 1353.230786][T15893] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1353.290291][T15899] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1353.371326][T19001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.381063][T19001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.450883][T19015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1353.459934][T19015] netlink: 'syz.4.2948': attribute type 5 has an invalid length. [ 1353.480088][T15899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.483349][T19001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.498296][T19015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2948'. [ 1353.520968][T15899] usb 1-1: config 0 descriptor?? [ 1353.555667][T19001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.671077][T19015] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1353.690634][T19015] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1353.741524][T19015] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1353.751624][T19015] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1353.771612][T19015] geneve2: entered promiscuous mode [ 1353.790254][T19015] geneve2: entered allmulticast mode [ 1354.035339][T15899] usb 4-1: USB disconnect, device number 27 [ 1354.814059][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.827855][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1354.842248][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.851074][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.859858][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.870921][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.879113][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1354.964669][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1354.977730][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1355.102535][T19022] lo speed is unknown, defaulting to 1000 [ 1355.287166][T19030] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2950'. [ 1355.702385][T19032] siw: device registration error -23 [ 1356.248353][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.392152][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1356.930072][ T5808] Bluetooth: hci2: command tx timeout [ 1356.971904][T15893] usb 1-1: USB disconnect, device number 26 [ 1357.056853][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.067299][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1357.156471][ T30] audit: type=1400 audit(1746283042.732:1438): avc: denied { map } for pid=19040 comm="syz.3.2953" path="socket:[62913]" dev="sockfs" ino=62913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1357.215207][T19022] chnl_net:caif_netlink_parms(): no params data found [ 1357.246685][ T30] audit: type=1400 audit(1746283042.732:1439): avc: denied { accept } for pid=19040 comm="syz.3.2953" path="socket:[62913]" dev="sockfs" ino=62913 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1357.365784][T19048] pim6reg9: entered allmulticast mode [ 1357.539310][T19022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.760244][T15899] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1357.997473][T19022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.014491][T19022] bridge_slave_0: entered allmulticast mode [ 1358.029825][T19022] bridge_slave_0: entered promiscuous mode [ 1358.089606][T19022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.119870][T19022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.131817][T19022] bridge_slave_1: entered allmulticast mode [ 1358.142776][T19022] bridge_slave_1: entered promiscuous mode [ 1358.153273][T15899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1358.168414][T15899] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1358.278154][T15899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1358.288800][T15899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.310034][T18957] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1358.377589][T15899] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1358.403700][T15899] usb 1-1: invalid MIDI out EP 0 [ 1358.501975][T18957] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 1358.552218][T18957] usb 3-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1358.564573][T18957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.569126][T19022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.605019][T18846] udevd[18846]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1358.637339][T19057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.646851][T19057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.672628][T19057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1358.682289][T19057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1358.726677][T15899] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1358.744307][T18957] usb 3-1: Product: syz [ 1358.812678][T18957] usb 3-1: Manufacturer: syz [ 1358.817288][T18957] usb 3-1: SerialNumber: syz [ 1358.920064][T15893] usb 1-1: USB disconnect, device number 27 [ 1359.050010][ T5808] Bluetooth: hci2: command tx timeout [ 1359.050020][T15889] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1359.056395][T18957] usb 3-1: config 0 descriptor?? [ 1359.231679][T18957] go7007-loader 3-1:0.0: can't handle multiple config [ 1359.243540][T18957] go7007-loader 3-1:0.0: probe failed [ 1359.511765][T15889] usb 5-1: Using ep0 maxpacket: 16 [ 1359.525182][T15889] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 1359.552249][T15889] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1359.575515][T15889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1359.598659][T15889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.633439][T15889] usb 5-1: config 0 descriptor?? [ 1359.938039][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1359.953898][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1359.969304][ T63] bond0 (unregistering): Released all slaves [ 1359.987214][T19022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1360.172735][ T63] tipc: Disabling bearer [ 1360.191707][ T63] tipc: Left network mode [ 1360.254750][T19022] team0: Port device team_slave_0 added [ 1360.344013][T19022] team0: Port device team_slave_1 added [ 1360.637414][T19022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.652169][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.697206][T19022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.769703][T15889] usb 3-1: USB disconnect, device number 34 [ 1360.846930][T19022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1360.854018][ T5900] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1360.866446][T19022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.896813][T19022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1360.897302][T19091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2960'. [ 1360.921598][ T63] hsr_slave_0: left promiscuous mode [ 1360.927565][ T63] hsr_slave_1: left promiscuous mode [ 1360.942492][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.951943][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.962239][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.969766][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.996980][ T63] veth1_macvtap: left promiscuous mode [ 1361.002747][ T63] veth0_macvtap: left promiscuous mode [ 1361.008856][ T63] veth1_vlan: left promiscuous mode [ 1361.190177][ T5808] Bluetooth: hci2: command tx timeout [ 1361.232016][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.238361][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.314139][T19096] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19096 comm=syz.2.2960 [ 1361.355624][T15899] usb 5-1: USB disconnect, device number 24 [ 1361.392876][ T5900] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 1361.447491][ T5900] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1361.467586][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.484943][T19099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 1361.502466][T19099] netlink: 'syz.4.2961': attribute type 5 has an invalid length. [ 1361.524484][T19099] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2961'. [ 1361.535941][ T5900] usb 4-1: Product: syz [ 1361.549202][ T5900] usb 4-1: Manufacturer: syz [ 1361.563347][ T5900] usb 4-1: SerialNumber: syz [ 1361.585590][ T5900] usb 4-1: config 0 descriptor?? [ 1361.606003][ T5900] go7007-loader 4-1:0.0: can't handle multiple config [ 1361.619504][ T5900] go7007-loader 4-1:0.0: probe failed [ 1362.364553][T19099] geneve3: entered promiscuous mode [ 1362.369801][T19099] geneve3: entered allmulticast mode [ 1362.562428][T19022] hsr_slave_0: entered promiscuous mode [ 1362.678029][T19022] hsr_slave_1: entered promiscuous mode [ 1363.250073][ T5808] Bluetooth: hci2: command tx timeout [ 1363.452529][ T5900] usb 4-1: USB disconnect, device number 28 [ 1363.477722][T19119] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1363.881555][T19132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 1364.329831][ T63] IPVS: stop unused estimator thread 0... [ 1364.718413][ T54] Bluetooth: hci5: Frame reassembly failed (-84) [ 1364.721497][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1364.734941][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1364.754157][ T54] Bluetooth: hci5: Frame reassembly failed (-84) [ 1365.017178][T15893] libceph: connect (1)[c::]:6789 error -101 [ 1365.023363][T15893] libceph: mon0 (1)[c::]:6789 connect error [ 1365.417788][T19141] ceph: No mds server is up or the cluster is laggy [ 1366.034608][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1366.070380][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1366.091737][T19022] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1366.481743][T19022] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1366.549414][T19022] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1366.585374][T19022] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1366.774160][ T5808] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1366.774182][ T5821] Bluetooth: hci5: command 0x1003 tx timeout [ 1367.015471][T19022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.085689][T19170] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1367.098198][T19022] 8021q: adding VLAN 0 to HW filter on device team0 [ 1367.133663][T19172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1367.144823][T19172] netlink: 'syz.0.2972': attribute type 5 has an invalid length. [ 1367.166837][T19170] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19170 comm=syz.2.2971 [ 1367.187078][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1367.194183][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1367.206873][T19172] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2972'. [ 1367.228521][ T190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1367.235688][ T190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1368.726822][T19022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1369.232926][T19022] veth0_vlan: entered promiscuous mode [ 1369.304653][T19207] random: crng reseeded on system resumption [ 1369.371742][T19022] veth1_vlan: entered promiscuous mode [ 1369.414869][T19022] veth0_macvtap: entered promiscuous mode [ 1369.424168][T19022] veth1_macvtap: entered promiscuous mode [ 1369.439884][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.450617][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.461432][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1369.472400][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.483957][T19022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.495179][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.506236][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.516531][T19022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1369.600095][T19022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1369.679060][T19211] 9pnet_virtio: no channels available for device syz [ 1370.051151][T19022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1370.075037][T19022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.087630][T19022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.096664][T19022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.107936][T19022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1370.381413][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.393770][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.433429][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1370.480378][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1370.491615][ T5900] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1370.735715][T19226] lo speed is unknown, defaulting to 1000 [ 1370.860723][T19231] fuse: Unknown parameter '0x0000000000000003' [ 1371.012553][ T5900] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1371.036798][ T5900] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1371.091286][ T5900] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1371.134747][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.194506][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2980'. [ 1371.330779][ T5900] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1371.847491][ T5900] usb 3-1: invalid MIDI out EP 0 [ 1371.860934][T19218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.869647][T19218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.883004][T19218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.892646][T19218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.920323][T19246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1371.940046][T19241] netlink: 'syz.4.2980': attribute type 5 has an invalid length. [ 1372.023438][T18983] udevd[18983]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1372.141940][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2981'. [ 1372.182526][ T5900] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1372.277530][ T5900] usb 3-1: USB disconnect, device number 35 [ 1372.656331][T19241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2980'. [ 1373.420051][T15894] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1373.621526][T15894] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1373.643499][T15894] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1373.652665][T15894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.680019][T15894] usb 2-1: Product: syz [ 1373.688538][T15894] usb 2-1: Manufacturer: syz [ 1373.703256][T15894] usb 2-1: SerialNumber: syz [ 1373.758863][T19275] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1373.762682][T15894] usb 2-1: config 0 descriptor?? [ 1373.792010][T15894] go7007-loader 2-1:0.0: can't handle multiple config [ 1373.801168][T15894] go7007-loader 2-1:0.0: probe failed [ 1373.830093][T19275] netlink: 'syz.2.2984': attribute type 5 has an invalid length. [ 1373.904721][T19275] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2984'. [ 1375.703587][T19297] lo speed is unknown, defaulting to 1000 [ 1376.281193][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1376.305435][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1376.313307][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1376.351522][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1376.363877][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1376.482415][T15979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.498747][T15979] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1376.533405][T15899] usb 2-1: USB disconnect, device number 32 [ 1376.834950][T19299] lo speed is unknown, defaulting to 1000 [ 1376.919321][T15979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.938437][T15979] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1377.288911][T15979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.300679][T15979] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1377.370079][ T5900] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1377.495410][T15979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.524468][T15979] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1377.574094][ T5900] usb 2-1: config 0 has no interfaces? [ 1377.610200][ T5900] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1377.628671][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.650586][ T5900] usb 2-1: Product: syz [ 1377.654831][ T5900] usb 2-1: Manufacturer: syz [ 1377.667574][ T5900] usb 2-1: SerialNumber: syz [ 1377.829085][ T5900] usb 2-1: config 0 descriptor?? [ 1378.249010][T19299] chnl_net:caif_netlink_parms(): no params data found [ 1378.345019][ T30] audit: type=1400 audit(1746283063.872:1440): avc: denied { ioctl } for pid=19306 comm="syz.1.2992" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1378.401774][T15979] tipc: Disabling bearer [ 1378.426620][T15979] tipc: Left network mode [ 1378.454725][ T5821] Bluetooth: hci5: command tx timeout [ 1379.195779][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.282714][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.377096][T19299] bridge_slave_0: entered allmulticast mode [ 1379.385012][T19299] bridge_slave_0: entered promiscuous mode [ 1379.393187][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.401667][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.420605][T19299] bridge_slave_1: entered allmulticast mode [ 1379.427830][T19299] bridge_slave_1: entered promiscuous mode [ 1379.605384][T19299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.717467][T19334] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2995'. [ 1379.762986][T19299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1380.536812][ T5821] Bluetooth: hci5: command tx timeout [ 1380.725960][ T5900] usb 2-1: USB disconnect, device number 33 [ 1381.576563][T15979] hsr_slave_0: left promiscuous mode [ 1381.582896][T15979] hsr_slave_1: left promiscuous mode [ 1381.589124][T15979] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.812533][T15979] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.831292][ T30] audit: type=1800 audit(1746283067.392:1441): pid=19345 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.2993" name="/newroot/587/bus" dev="tmpfs" ino=3162 res=0 errno=0 [ 1381.914516][T15979] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.925791][T15979] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.008980][T15979] veth1_macvtap: left promiscuous mode [ 1382.081859][T15979] veth0_macvtap: left promiscuous mode [ 1382.088326][T15979] veth1_vlan: left promiscuous mode [ 1382.511042][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 1382.547418][T19330] block nbd2: shutting down sockets [ 1382.610083][ T5808] Bluetooth: hci5: command tx timeout [ 1383.237025][T15899] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1383.404251][T15899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1383.415451][T15899] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1383.428666][T15899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1383.511837][T15899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.618937][T15899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1383.631098][T15899] usb 5-1: invalid MIDI out EP 0 [ 1383.959932][T18846] udevd[18846]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.983825][T15899] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1384.348810][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.374159][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.428883][T19365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1384.476059][T19365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1384.534147][ T5821] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1384.690342][ T5808] Bluetooth: hci5: command tx timeout [ 1385.778165][T15899] usb 5-1: USB disconnect, device number 25 [ 1386.059394][T19299] team0: Port device team_slave_0 added [ 1386.069693][T19299] team0: Port device team_slave_1 added [ 1386.076688][T15889] lo speed is unknown, defaulting to 1000 [ 1386.088461][T15889] infiniband syz0: ib_query_port failed (-19) [ 1386.212526][T19398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3004'. [ 1386.222691][T19398] netlink: 'syz.4.3004': attribute type 5 has an invalid length. [ 1386.315339][T19299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.551848][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.628048][T19398] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3004'. [ 1386.637348][T19299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.657519][T19299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.664575][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1386.690656][T19299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1386.903897][T19299] hsr_slave_0: entered promiscuous mode [ 1386.931263][T19299] hsr_slave_1: entered promiscuous mode [ 1386.937619][T19299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1386.954384][T19299] Cannot create hsr debugfs directory [ 1387.287569][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1388.498930][T15979] IPVS: stop unused estimator thread 0... [ 1389.457654][T19449] xt_hashlimit: overflow, try lower: 3/0 [ 1389.852851][ T30] audit: type=1400 audit(1746283075.332:1442): avc: denied { shutdown } for pid=19448 comm="syz.3.3011" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1389.875351][ T30] audit: type=1400 audit(1746283075.332:1443): avc: denied { read } for pid=19448 comm="syz.3.3011" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1389.965043][ T30] audit: type=1400 audit(1746283075.332:1444): avc: denied { open } for pid=19448 comm="syz.3.3011" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1390.257918][T19456] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3012'. [ 1390.667692][T19299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1390.688732][T19299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1390.690165][T15893] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1390.780887][T19469] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3014'. [ 1391.175155][T19299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1391.208732][T19299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1391.308148][T15893] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1391.334045][T15893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1391.356106][T15893] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.439924][T15893] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1391.446358][T19299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.580540][T19299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1392.097062][T15893] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1392.108630][T15893] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1392.117451][T15893] usb 3-1: Manufacturer: syz [ 1392.136316][T15893] usb 3-1: config 0 descriptor?? [ 1392.193930][T15979] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.201039][T15979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1392.265971][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.273118][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.581987][T15893] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 1392.631284][T15893] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 1392.697385][T15893] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1392.848004][T19501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1393.112334][T19501] netlink: 'syz.4.3016': attribute type 5 has an invalid length. [ 1393.156218][T19501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3016'. [ 1393.212121][ T30] audit: type=1400 audit(1746283078.792:1445): avc: denied { append } for pid=19460 comm="syz.2.3013" name="hiddev0" dev="devtmpfs" ino=3554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1393.352269][T15889] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1393.516778][T15889] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1393.563368][T15889] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1393.573336][T15889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1393.577518][T19299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.603175][T15889] usb 2-1: Product: syz [ 1393.609042][T15889] usb 2-1: Manufacturer: syz [ 1393.649340][T15889] usb 2-1: SerialNumber: syz [ 1393.687240][T15889] usb 2-1: config 0 descriptor?? [ 1393.708955][T19299] veth0_vlan: entered promiscuous mode [ 1393.747603][T19299] veth1_vlan: entered promiscuous mode [ 1393.764568][T15889] go7007-loader 2-1:0.0: can't handle multiple config [ 1393.771944][T15889] go7007-loader 2-1:0.0: probe failed [ 1393.941607][T19299] veth0_macvtap: entered promiscuous mode [ 1393.952122][T19299] veth1_macvtap: entered promiscuous mode [ 1394.012291][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.071665][T19512] xt_hashlimit: overflow, try lower: 3/0 [ 1394.079348][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.371529][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.383317][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.395814][T19299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.416546][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.428360][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.439072][T19299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.453373][T19299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.550211][T19299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.575152][T19299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.596474][T19299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.616484][T19299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.626402][T19299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.729874][T15979] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.752199][T15979] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1394.791508][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1394.799892][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.124520][T18957] usb 3-1: USB disconnect, device number 36 [ 1395.650474][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1395.668743][T19542] netlink: 'syz.4.3021': attribute type 5 has an invalid length. [ 1395.676689][T15893] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1395.732627][T19542] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3021'. [ 1396.206220][T15893] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 1396.312434][T15893] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1396.334834][T15893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.357477][T15893] usb 1-1: Product: syz [ 1396.367948][T18957] usb 2-1: USB disconnect, device number 34 [ 1396.379991][T15893] usb 1-1: Manufacturer: syz [ 1396.384589][T15893] usb 1-1: SerialNumber: syz [ 1396.428873][T15893] usb 1-1: config 0 descriptor?? [ 1396.448128][T15893] go7007-loader 1-1:0.0: can't handle multiple config [ 1396.456142][T15893] go7007-loader 1-1:0.0: probe failed [ 1396.608088][ T30] audit: type=1400 audit(1746283082.192:1446): avc: denied { create } for pid=19555 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1396.710770][T19558] loop8: detected capacity change from 0 to 1 [ 1396.723718][T18887] Dev loop8: unable to read RDB block 1 [ 1396.729638][T18887] loop8: unable to read partition table [ 1396.747466][T18887] loop8: partition table beyond EOD, truncated [ 1396.782772][ T30] audit: type=1400 audit(1746283082.232:1447): avc: denied { connect } for pid=19555 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1396.810970][T19558] Dev loop8: unable to read RDB block 1 [ 1396.823795][T19558] loop8: unable to read partition table [ 1396.830214][T19558] loop8: partition table beyond EOD, truncated [ 1396.837636][T19558] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1397.096767][T19103] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1398.041016][T19103] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1398.083249][T19103] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1398.113069][T19103] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1398.141186][T19103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.183957][T19103] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1398.199566][T19103] usb 2-1: invalid MIDI out EP 0 [ 1398.385087][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.394330][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.402109][ T30] audit: type=1400 audit(1746283083.972:1448): avc: denied { setopt } for pid=19555 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1398.446789][T19103] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1398.459413][T19557] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1398.467989][T19557] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1398.760198][T18957] usb 1-1: USB disconnect, device number 28 [ 1398.834683][ T30] audit: type=1400 audit(1746283084.042:1449): avc: denied { bind } for pid=19555 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1399.130768][ T30] audit: type=1400 audit(1746283084.272:1450): avc: denied { write } for pid=19555 comm="syz.1.3022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1399.799007][T15889] usb 2-1: USB disconnect, device number 35 [ 1399.981067][T19590] xt_hashlimit: overflow, try lower: 3/0 [ 1400.656017][T19596] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1402.572239][T19616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1402.987381][T19619] random: crng reseeded on system resumption [ 1403.347256][T19621] 9pnet: Unknown protocol version 9p2000.u#Ì`y•[Žðþ®– [ 1403.347256][T19621] ɇŒ^Bwʬ>¢Bn’×!Ÿ qäåÁFê¡¿=)P0wXºuÝ53s3\ª‘µä÷ðv í¹¯˜0˜èI²ük±¿³æÞj#²ZP3¤ŒôµØ [ 1404.340037][T15893] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1404.981997][T15893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1405.004487][T15893] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.078557][T15893] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1405.106436][T15893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1405.130664][T15893] usb 1-1: config 0 descriptor?? [ 1405.673833][T15893] pyra 0003:1E7D:2CF6.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1405.933824][T15899] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1406.153324][T15899] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 1406.292951][T15893] pyra 0003:1E7D:2CF6.0008: couldn't init struct pyra_device [ 1406.301409][T15893] pyra 0003:1E7D:2CF6.0008: couldn't install mouse [ 1406.335565][T15899] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1406.344677][T15899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1406.354020][T15899] usb 5-1: Product: syz [ 1406.358221][T15899] usb 5-1: Manufacturer: syz [ 1406.364236][T15899] usb 5-1: SerialNumber: syz [ 1406.370835][T15893] pyra 0003:1E7D:2CF6.0008: probe with driver pyra failed with error -32 [ 1406.377499][T15899] usb 5-1: config 0 descriptor?? [ 1406.454338][T15899] go7007-loader 5-1:0.0: can't handle multiple config [ 1406.475242][T15899] go7007-loader 5-1:0.0: probe failed [ 1406.522296][T15893] usb 1-1: USB disconnect, device number 29 [ 1406.719303][ T30] audit: type=1400 audit(1746283092.302:1451): avc: denied { create } for pid=19656 comm="syz.3.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1407.391977][ T30] audit: type=1400 audit(1746283092.592:1452): avc: denied { bind } for pid=19656 comm="syz.3.3043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 1409.426230][T19676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1409.939455][T15889] usb 5-1: USB disconnect, device number 26 [ 1409.961905][T19676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1409.971987][T19679] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1410.027632][T19676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1410.884213][T19676] team0 (unregistering): Port device team_slave_0 removed [ 1410.908582][T19676] team0 (unregistering): Port device team_slave_1 removed [ 1413.039871][ T30] audit: type=1400 audit(1746283098.172:1453): avc: denied { remount } for pid=19706 comm="syz.0.3055" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1413.622316][T19721] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3057'. [ 1414.906002][T19737] pim6reg9: entered allmulticast mode [ 1415.925116][T19748] ip6gretap0: entered promiscuous mode [ 1416.430282][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1416.446402][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1416.468335][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1416.525762][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1416.535538][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1416.587861][ T5879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.598486][ T5879] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1416.927400][ T5879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1416.940977][ T5879] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1418.140234][T19103] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1418.297510][ T5879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1418.360010][ T5879] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1418.872262][T19103] usb 2-1: too many configurations: 33, using maximum allowed: 8 [ 1418.880428][ T5808] Bluetooth: hci1: command tx timeout [ 1418.931531][T19103] usb 2-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1418.942436][T19103] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.950728][T19103] usb 2-1: Product: syz [ 1418.954972][T19103] usb 2-1: Manufacturer: syz [ 1418.959565][T19103] usb 2-1: SerialNumber: syz [ 1418.968214][T19103] usb 2-1: config 0 descriptor?? [ 1419.093628][T19103] go7007-loader 2-1:0.0: can't handle multiple config [ 1419.102943][T19746] chnl_net:caif_netlink_parms(): no params data found [ 1419.116616][T19103] go7007-loader 2-1:0.0: probe failed [ 1419.882784][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 1420.015213][ T5879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.026638][ T5879] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1420.339756][T19794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 1420.902921][T19746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1420.910926][T19746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1420.918090][T19746] bridge_slave_0: entered allmulticast mode [ 1420.934152][T19746] bridge_slave_0: entered promiscuous mode [ 1420.934622][ T5821] Bluetooth: hci1: command tx timeout [ 1422.037365][ T5900] usb 2-1: USB disconnect, device number 36 [ 1422.614106][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.627916][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.767976][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.777337][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.786581][ T5879] bond0 (unregistering): Released all slaves [ 1422.925260][ T5879] tipc: Disabling bearer [ 1422.930670][ T5879] tipc: Left network mode [ 1422.930783][T19746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1422.958371][T19746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.988308][T19746] bridge_slave_1: entered allmulticast mode [ 1423.000744][T19746] bridge_slave_1: entered promiscuous mode [ 1423.015367][ T5821] Bluetooth: hci1: command tx timeout [ 1424.297332][T19746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1424.471535][T19746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1424.518153][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1424.587872][T19840] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1424.614904][T19839] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1424.624553][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3076'. [ 1424.660790][T19840] tipc: Resetting bearer [ 1425.024002][ T30] audit: type=1400 audit(1746283110.582:1454): avc: denied { mounton } for pid=19842 comm="syz.0.3077" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1425.340884][ T5821] Bluetooth: hci1: command tx timeout [ 1425.402904][T19840] tipc: Disabling bearer [ 1425.431429][T19840] team0 (unregistering): Port device team_slave_0 removed [ 1425.504914][T19840] team0 (unregistering): Port device team_slave_1 removed [ 1425.600823][ T5879] hsr_slave_0: left promiscuous mode [ 1425.641856][ T5879] hsr_slave_1: left promiscuous mode [ 1425.658001][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1425.679858][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1425.704285][ T5879] pim6reg9 (unregistering): left allmulticast mode [ 1426.880242][T18957] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1426.945297][T19861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3082'. [ 1426.969177][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3082'. [ 1429.611416][ T30] audit: type=1400 audit(1746283115.192:1455): avc: denied { create } for pid=19865 comm="syz.4.3084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1429.963728][T19873] netlink: 2088 bytes leftover after parsing attributes in process `syz.4.3084'. [ 1430.291440][T15894] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1430.503043][T15894] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 1430.549899][T15894] usb 4-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1430.559146][T15894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.567137][T15894] usb 4-1: Product: syz [ 1430.571782][T15894] usb 4-1: Manufacturer: syz [ 1430.576351][T15894] usb 4-1: SerialNumber: syz [ 1430.592396][T15894] usb 4-1: config 0 descriptor?? [ 1430.599371][T15894] go7007-loader 4-1:0.0: can't handle multiple config [ 1430.610364][T15894] go7007-loader 4-1:0.0: probe failed [ 1430.844259][T18957] usb 2-1: device descriptor read/64, error -71 [ 1431.103056][T18957] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1431.167555][T19746] team0: Port device team_slave_0 added [ 1431.244065][T19746] team0: Port device team_slave_1 added [ 1431.309812][T18957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1431.981788][T18957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1432.309149][T19746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1432.316276][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.340000][T18957] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1432.343005][T19746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1432.374350][T19746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1432.382019][T19746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1432.408515][T19746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1432.425726][T18957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.467466][T18957] usb 2-1: config 0 descriptor?? [ 1432.520946][T19746] hsr_slave_0: entered promiscuous mode [ 1432.536179][T19746] hsr_slave_1: entered promiscuous mode [ 1432.553476][T19746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1432.574230][T19746] Cannot create hsr debugfs directory [ 1432.714895][ T5879] IPVS: stop unused estimator thread 0... [ 1432.960037][T15893] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1433.026163][T18957] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 1433.259992][ T5900] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1433.288329][T15893] usb 5-1: config 0 has no interfaces? [ 1433.303471][T15893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1433.335415][T15893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.523480][T15895] usb 4-1: USB disconnect, device number 29 [ 1433.570308][T15893] usb 5-1: Product: syz [ 1433.574750][T15893] usb 5-1: Manufacturer: syz [ 1433.584701][T15893] usb 5-1: SerialNumber: syz [ 1433.590648][ T5900] usb 1-1: too many configurations: 33, using maximum allowed: 8 [ 1433.678130][T15893] usb 5-1: config 0 descriptor?? [ 1433.822320][ T5900] usb 1-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1433.831541][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.840873][ T5900] usb 1-1: Product: syz [ 1433.845058][ T5900] usb 1-1: Manufacturer: syz [ 1433.849642][ T5900] usb 1-1: SerialNumber: syz [ 1433.880524][ T5900] usb 1-1: config 0 descriptor?? [ 1433.885645][T18957] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 1433.926870][T18957] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 1433.957854][ T5900] go7007-loader 1-1:0.0: can't handle multiple config [ 1433.970241][ T5900] go7007-loader 1-1:0.0: probe failed [ 1433.979701][T18957] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 1433.992865][T18957] usb 2-1: USB disconnect, device number 38 [ 1434.136752][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3089'. [ 1435.490063][T15893] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1436.381228][T19103] usb 1-1: USB disconnect, device number 30 [ 1436.390468][T15893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1436.408161][T15893] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1436.473099][T15893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1436.484384][T15893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.524260][T15899] usb 5-1: USB disconnect, device number 27 [ 1436.556779][T15893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1436.666740][T15893] usb 2-1: invalid MIDI out EP 0 [ 1437.289381][T19901] udevd[19901]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1437.316832][T15893] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1437.328714][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.347946][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.367926][T19920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1437.377521][T19920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1437.451290][T19941] pim6reg9: entered allmulticast mode [ 1437.580038][T15899] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1437.654579][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3095'. [ 1438.452888][ T5900] usb 2-1: USB disconnect, device number 39 [ 1438.456545][T19746] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1438.502347][T15899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1438.515453][T15899] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1438.530374][T19746] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1438.537292][T15899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1438.558015][T15899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.574203][T19746] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1438.597024][T15899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1438.609289][T15899] usb 5-1: invalid MIDI out EP 0 [ 1438.972371][T19956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1438.982619][T19956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1438.994131][T19746] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1439.004032][T15899] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1439.046560][ T5900] libceph: connect (1)[c::]:6789 error -101 [ 1439.070186][ T5900] libceph: mon0 (1)[c::]:6789 connect error [ 1439.266358][T19939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1439.275839][T19939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1439.440281][T15893] libceph: connect (1)[c::]:6789 error -101 [ 1439.499825][T19957] ceph: No mds server is up or the cluster is laggy [ 1439.555610][ T30] audit: type=1400 audit(1746283125.142:1456): avc: denied { read } for pid=19928 comm="syz.4.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1439.610364][T15899] usb 5-1: USB disconnect, device number 28 [ 1440.077170][T15893] libceph: mon0 (1)[c::]:6789 connect error [ 1440.580558][T19746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1440.706419][T19746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1440.743751][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1440.750883][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1440.934850][T19975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3098'. [ 1442.227334][T19985] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1442.733530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1442.740689][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1443.556660][T19746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1445.230042][T15899] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1445.564078][T15899] usb 5-1: too many configurations: 33, using maximum allowed: 8 [ 1445.779552][T15899] usb 5-1: New USB device found, idVendor=0eb1, idProduct=6668, bcdDevice=57.b8 [ 1445.808971][T15899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.830352][T15899] usb 5-1: Product: syz [ 1445.834511][T15899] usb 5-1: Manufacturer: syz [ 1445.839081][T15899] usb 5-1: SerialNumber: syz [ 1445.852358][T15899] usb 5-1: config 0 descriptor?? [ 1445.859727][T15899] go7007-loader 5-1:0.0: can't handle multiple config [ 1445.867636][T15899] go7007-loader 5-1:0.0: probe failed [ 1446.848514][T19746] veth0_vlan: entered promiscuous mode [ 1447.743434][T19746] veth1_vlan: entered promiscuous mode [ 1447.853909][T19746] veth0_macvtap: entered promiscuous mode [ 1447.874850][T19746] veth1_macvtap: entered promiscuous mode [ 1447.908109][T15895] usb 5-1: USB disconnect, device number 29 [ 1447.948763][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.965602][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1447.978058][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1447.990034][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.001647][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1448.023976][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.043307][T19746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1448.093118][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.109459][T20086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1448.139008][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.192288][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.230751][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.336124][T19746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1448.347198][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3108'. [ 1448.367010][T19746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1448.396049][T19746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1448.409240][T19746] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.425162][T19746] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.434394][T19746] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.443546][T19746] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1448.788009][T15898] libceph: connect (1)[c::]:6789 error -101 [ 1448.796385][T15898] libceph: mon0 (1)[c::]:6789 connect error [ 1449.090162][T15898] libceph: connect (1)[c::]:6789 error -101 [ 1449.347333][T15898] libceph: mon0 (1)[c::]:6789 connect error [ 1449.371766][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.379705][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.559983][T20098] ceph: No mds server is up or the cluster is laggy [ 1449.588563][ T5879] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.725520][ T5879] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1449.834639][T20114] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3114'. [ 1450.079465][T20114] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20114 comm=syz.0.3114 [ 1450.466014][T20121] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1450.640821][ T30] audit: type=1400 audit(1746283136.182:1457): avc: denied { create } for pid=20122 comm="syz.1.3115" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1450.914731][ T30] audit: type=1400 audit(1746283136.492:1458): avc: denied { unlink } for pid=19022 comm="syz-executor" name="file0" dev="tmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1451.062650][T20127] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 1451.111892][T20128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1451.122860][T20129] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20129 comm=syz.4.3118 [ 1451.135701][T20128] netlink: 'syz.2.3063': attribute type 5 has an invalid length. [ 1451.264127][T20128] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1451.390084][T20133] ip6gretap0: entered promiscuous mode [ 1453.655397][T20128] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1453.684720][T20128] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1453.733861][T20128] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1453.761165][T20128] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1453.782036][T20128] geneve2: entered promiscuous mode [ 1453.828559][T20128] geneve2: entered allmulticast mode [ 1454.100597][T20154] netlink: 2088 bytes leftover after parsing attributes in process `syz.0.3124'. [ 1454.206177][T15899] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1454.341864][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1454.351404][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1454.363626][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1454.379343][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1454.400303][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1454.581385][T15899] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1454.717664][T15899] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1454.752911][T15899] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1454.791628][T15899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1455.074990][T15899] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1455.094155][T15899] usb 5-1: invalid MIDI out EP 0 [ 1455.170470][T15899] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1455.283531][T20163] udevd[20163]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1455.314302][T20150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.341256][ T190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1455.560418][T20150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.651061][ T190] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.653729][T20150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1455.731634][T15899] libceph: connect (1)[c::]:6789 error -101 [ 1455.737720][T15899] libceph: mon0 (1)[c::]:6789 connect error [ 1455.785412][T20150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1455.838633][ T190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1455.879176][ T190] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1455.974761][T15895] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1456.000747][T15899] libceph: connect (1)[c::]:6789 error -101 [ 1456.006896][T15899] libceph: mon0 (1)[c::]:6789 connect error [ 1456.146833][T20181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1456.162473][T20169] ceph: No mds server is up or the cluster is laggy [ 1456.185043][T20181] netlink: 'syz.0.3127': attribute type 5 has an invalid length. [ 1456.194496][ T190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1456.233027][T20181] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3127'. [ 1456.250255][T15895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1456.263161][T15895] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1456.278738][T15895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1456.400043][ T190] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1456.419031][T15895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1456.543084][ T5808] Bluetooth: hci4: command tx timeout [ 1456.878831][T15895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1456.886307][T15895] usb 2-1: invalid MIDI out EP 0 [ 1456.949667][T15895] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1456.970647][ T190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1456.983975][T20187] udevd[20187]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1456.990189][ T190] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1457.168339][T15895] usb 5-1: USB disconnect, device number 30 [ 1457.262106][T20171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.270857][T20171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.286585][T20171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1457.297333][T20171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1457.467915][T20181] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1457.479698][T20181] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1457.957575][T20195] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3130'. [ 1457.998825][T20181] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1458.022473][T20181] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1458.031741][T15895] usb 2-1: USB disconnect, device number 40 [ 1458.049481][T20181] geneve2: entered promiscuous mode [ 1458.071479][T20181] geneve2: entered allmulticast mode [ 1458.086890][T20157] chnl_net:caif_netlink_parms(): no params data found [ 1458.124112][T20195] vlan0: entered promiscuous mode [ 1458.137977][T20195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3130'. [ 1458.476792][T20207] sd 0:0:1:0: device reset [ 1458.621281][ T5808] Bluetooth: hci4: command tx timeout [ 1458.956914][T20157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1458.978821][T20157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1459.045375][T20157] bridge_slave_0: entered allmulticast mode [ 1459.127781][T20157] bridge_slave_0: entered promiscuous mode [ 1459.179455][T20157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1459.330027][T20157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1459.360212][T20157] bridge_slave_1: entered allmulticast mode [ 1459.382232][T20157] bridge_slave_1: entered promiscuous mode [ 1459.942432][T20218] fuse: Bad value for 'fd' [ 1460.210833][ T30] audit: type=1400 audit(1746283145.772:1459): avc: denied { shutdown } for pid=20216 comm="syz.1.3134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1460.696963][ T5808] Bluetooth: hci4: command tx timeout [ 1460.806618][T20157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.780007][ T5808] Bluetooth: hci4: command tx timeout [ 1463.511751][T20157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.570483][ T190] bridge_slave_1: left allmulticast mode [ 1463.576175][ T190] bridge_slave_1: left promiscuous mode [ 1463.696393][ T190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.728254][ T190] bridge_slave_0: left allmulticast mode [ 1463.747638][ T190] bridge_slave_0: left promiscuous mode [ 1463.774033][ T190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.123718][T15899] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1464.760326][T15899] usb 3-1: too many configurations: 33, using maximum allowed: 8 [ 1466.122356][ T190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.131910][ T190] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.141901][ T190] bond0 (unregistering): Released all slaves [ 1466.214050][T20157] team0: Port device team_slave_0 added [ 1466.225559][T20157] team0: Port device team_slave_1 added [ 1466.326585][T15899] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1466.360749][T15899] usb 3-1: can't read configurations, error -71 [ 1466.406882][ T190] tipc: Disabling bearer [ 1466.427264][ T190] tipc: Left network mode [ 1466.437325][T20157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1466.463368][T20157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.550161][T20157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1466.572482][T20157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1466.612710][T20157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1466.646829][T20222] tipc: Subscription rejected, illegal request [ 1466.829161][T20157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1468.141237][T20157] hsr_slave_0: entered promiscuous mode [ 1468.149141][T20157] hsr_slave_1: entered promiscuous mode [ 1468.187394][T20157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1468.220132][T20157] Cannot create hsr debugfs directory [ 1469.181269][T20295] sd 0:0:1:0: device reset [ 1469.324831][ T30] audit: type=1400 audit(1746283154.892:1460): avc: denied { connect } for pid=20289 comm="syz.2.3149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1470.157749][ T190] hsr_slave_0: left promiscuous mode [ 1470.179228][ T190] hsr_slave_1: left promiscuous mode [ 1470.194150][ T190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.275555][ T30] audit: type=1400 audit(1746283155.862:1461): avc: denied { read write } for pid=20307 comm="syz.4.3155" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1470.724726][ T30] audit: type=1400 audit(1746283155.932:1462): avc: denied { open } for pid=20307 comm="syz.4.3155" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 1471.157135][ T190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.264105][ T190] pim6reg9 (unregistering): left allmulticast mode [ 1473.953750][ T30] audit: type=1400 audit(1746283159.532:1463): avc: denied { setopt } for pid=20329 comm="syz.4.3158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1474.261458][ T30] audit: type=1400 audit(1746283159.532:1464): avc: denied { ioctl } for pid=20329 comm="syz.4.3158" path="socket:[69779]" dev="sockfs" ino=69779 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1477.513215][T20386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3168'. [ 1478.190102][T20374] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1478.206675][T20374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1478.367479][ T190] IPVS: stop unused estimator thread 0... [ 1478.392366][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 1479.885679][T20157] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1480.215790][T20157] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1480.378150][ T30] audit: type=1400 audit(1746283165.962:1465): avc: denied { kexec_image_load } for pid=20412 comm="syz.0.3179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 1480.960165][T20157] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1480.994957][T20157] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1481.025248][ T5821] Bluetooth: hci2: command 0x0406 tx timeout [ 1481.328232][T20157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1481.460385][T20157] 8021q: adding VLAN 0 to HW filter on device team0 [ 1481.524364][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1481.531506][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1481.588046][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1481.595211][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1481.673772][ T30] audit: type=1400 audit(1746283167.212:1466): avc: denied { ioctl } for pid=20432 comm="syz.0.3182" path="socket:[69341]" dev="sockfs" ino=69341 ioctlcmd=0x8924 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1481.699057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1481.824947][T20437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1482.393959][T20434] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1482.393959][T20434] program syz.0.3182 not setting count and/or reply_len properly [ 1484.097190][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.103521][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.459060][T20157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1484.781510][T20469] Bluetooth: MGMT ver 1.23 [ 1485.327935][T20157] veth0_vlan: entered promiscuous mode [ 1485.374702][T20157] veth1_vlan: entered promiscuous mode [ 1485.568912][T20472] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1485.568912][T20472] program syz.2.3188 not setting count and/or reply_len properly [ 1486.664036][T20157] veth0_macvtap: entered promiscuous mode [ 1486.875467][T20157] veth1_macvtap: entered promiscuous mode [ 1487.017213][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.036578][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.073643][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.528015][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.549382][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.568721][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.591518][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1487.618857][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.654576][T20157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1488.193272][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.246881][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.632008][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.655258][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.705485][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.736454][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.763163][T20157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1488.802512][T20157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1488.828256][T20157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1488.838319][T20157] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.847099][T20157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.869975][T20157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.888926][T20157] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1489.262946][ T30] audit: type=1400 audit(1746283174.562:1467): avc: denied { mount } for pid=20507 comm="syz.2.3194" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1489.619159][ T190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1489.640366][ T190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.056480][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1491.088662][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1491.167346][T20522] xt_connbytes: Forcing CT accounting to be enabled [ 1491.174131][T20522] Cannot find set identified by id 0 to match [ 1494.434360][ T30] audit: type=1400 audit(1746283179.762:1468): avc: denied { read } for pid=20559 comm="syz.1.3203" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1494.506676][T20565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3204'. [ 1494.560020][ T30] audit: type=1400 audit(1746283179.762:1469): avc: denied { open } for pid=20559 comm="syz.1.3203" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1494.617004][T20565] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20565 comm=syz.3.3204 [ 1494.618471][ T30] audit: type=1400 audit(1746283179.772:1470): avc: denied { ioctl } for pid=20559 comm="syz.1.3203" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1497.870116][T20590] capability: warning: `syz.4.3211' uses deprecated v2 capabilities in a way that may be insecure [ 1497.882208][T20590] ucma_write: process 323 (syz.4.3211) changed security contexts after opening file descriptor, this is not allowed. [ 1497.956887][T20582] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1497.974819][ T30] audit: type=1400 audit(1746283183.452:1471): avc: denied { getopt } for pid=20588 comm="syz.4.3211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1498.449729][ T30] audit: type=1400 audit(1746283184.032:1472): avc: denied { watch } for pid=20604 comm="syz.4.3215" path="/72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1499.236477][ T30] audit: type=1400 audit(1746283184.082:1473): avc: denied { watch_sb watch_reads } for pid=20604 comm="syz.4.3215" path="/72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=401 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1501.491830][ T5821] Bluetooth: hci5: command 0x0406 tx timeout [ 1502.116196][T20637] sd 0:0:1:0: device reset [ 1502.693257][T20642] veth0_vlan: entered allmulticast mode [ 1503.846995][ T30] audit: type=1400 audit(1746283188.992:1474): avc: denied { watch_mount } for pid=20641 comm="syz.2.3226" path="/24" dev="tmpfs" ino=144 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1504.170151][T15895] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1504.382051][T15895] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1504.396475][T15895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1504.410857][T15895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1504.424175][T15895] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1504.433632][T15895] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.441848][T15895] usb 1-1: Product: syz [ 1504.446107][T15895] usb 1-1: Manufacturer: syz [ 1504.451097][T15895] usb 1-1: SerialNumber: syz [ 1504.537180][T15895] usb 1-1: config 0 descriptor?? [ 1504.626298][T20660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 1505.447613][T20661] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1506.047501][T20661] netlink: 'syz.2.3230': attribute type 5 has an invalid length. [ 1506.171200][T20661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3230'. [ 1507.488875][T20673] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1507.507014][T20673] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20673 comm=syz.3.3234 [ 1507.623889][T20683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3229'. [ 1510.883158][T20729] sd 0:0:1:0: device reset [ 1511.726226][T20737] veth0_vlan: entered allmulticast mode [ 1515.268835][T20761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1520.950057][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3260'. [ 1521.815556][T20785] 9pnet_fd: Insufficient options for proto=fd [ 1525.664066][T15895] iguanair 1-1:0.0: failed to get version [ 1526.443774][T15895] iguanair 1-1:0.0: probe with driver iguanair failed with error -110 [ 1526.457076][T15895] usb 1-1: USB disconnect, device number 31 [ 1526.827130][T20820] sd 0:0:1:0: device reset [ 1527.540882][T20826] ip6gretap0: entered promiscuous mode [ 1529.348581][T20834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 1530.828221][T20846] ubi31: attaching mtd0 [ 1530.843944][T20846] ubi31: scanning is finished [ 1530.848749][T20846] ubi31: empty MTD device detected [ 1530.862675][T20837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3275'. [ 1531.688276][T20858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3280'. [ 1531.767949][T20858] 9pnet_fd: Insufficient options for proto=fd [ 1533.103323][T20846] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1533.145000][T20846] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1533.159168][T20846] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1533.277590][T20846] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 1533.740499][T20846] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1533.868517][T20846] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1534.073865][T20846] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 846398517 [ 1534.087365][T20846] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1534.114390][T20863] ubi31: background thread "ubi_bgt31d" started, PID 20863 [ 1535.640740][ T30] audit: type=1400 audit(1746283221.232:1475): avc: denied { create } for pid=20885 comm="syz.3.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1535.752737][ T30] audit: type=1400 audit(1746283221.292:1476): avc: denied { getopt } for pid=20885 comm="syz.3.3288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1538.685971][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3294'. [ 1541.444595][ T30] audit: type=1400 audit(1746283227.032:1477): avc: denied { connect } for pid=20929 comm="syz.1.3301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1542.785373][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 1543.586186][T20959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3309'. [ 1543.692285][T20959] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20959 comm=syz.4.3309 [ 1543.747395][ T30] audit: type=1400 audit(1746283229.332:1478): avc: denied { listen } for pid=20960 comm="syz.0.3310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1543.876260][T20972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3313'. [ 1544.149327][T20975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3310'. [ 1545.499545][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.508342][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.067869][T21010] sd 0:0:1:0: device reset [ 1547.915730][T21017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3323'. [ 1548.032607][T21017] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21017 comm=syz.1.3323 [ 1548.274983][T21029] sd 0:0:1:0: device reset [ 1549.148432][T21028] sd 0:0:1:0: device reset [ 1551.443379][T21036] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3329'. [ 1551.456451][T21039] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3328'. [ 1551.603347][T15898] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1552.721192][T21054] xt_connbytes: Forcing CT accounting to be enabled [ 1552.727931][T21054] Cannot find set identified by id 0 to match [ 1553.052961][T15898] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1553.131716][T15898] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1553.286332][T15898] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1553.300536][T15898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.375024][T15898] usb 2-1: can't set config #27, error -71 [ 1553.911402][T15898] usb 2-1: USB disconnect, device number 41 [ 1554.816691][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1554.851389][T21056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3335'. [ 1554.870359][T21067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1554.886746][T21067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1554.895970][ T30] audit: type=1400 audit(1746283240.472:1479): avc: denied { read } for pid=21068 comm="syz.3.3339" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1554.990550][T21067] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3338'. [ 1555.022201][T21072] binder: 21068:21072 ioctl c0306201 200000000080 returned -14 [ 1555.090151][T21076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 1555.466190][ T30] audit: type=1400 audit(1746283240.472:1480): avc: denied { open } for pid=21068 comm="syz.3.3339" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1555.494401][T21072] binder: BINDER_SET_CONTEXT_MGR already set [ 1555.505601][ T30] audit: type=1400 audit(1746283240.512:1481): avc: denied { ioctl } for pid=21068 comm="syz.3.3339" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1555.630235][T21072] binder: 21068:21072 ioctl 4018620d 200000000040 returned -16 [ 1555.655067][ T30] audit: type=1400 audit(1746283240.512:1482): avc: denied { set_context_mgr } for pid=21068 comm="syz.3.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1555.750487][T21080] ubi: mtd0 is already attached to ubi31 [ 1556.019986][ T30] audit: type=1400 audit(1746283241.082:1483): avc: denied { write } for pid=21068 comm="syz.3.3339" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1556.188264][T21081] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1556.188264][T21081] program syz.0.3342 not setting count and/or reply_len properly [ 1557.994493][T21103] xt_connbytes: Forcing CT accounting to be enabled [ 1558.001431][T21103] Cannot find set identified by id 0 to match [ 1559.905932][T21119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3354'. [ 1560.841075][T21126] ubi: mtd0 is already attached to ubi31 [ 1561.379106][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1561.520083][T21128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1561.574154][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1561.850395][T21128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3357'. [ 1562.106792][T21133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3359'. [ 1562.534526][ T30] audit: type=1400 audit(1746283248.122:1484): avc: denied { connect } for pid=21141 comm="syz.1.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 1563.539099][T21154] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3362'. [ 1564.102693][T21168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3367'. [ 1567.775444][T21192] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3375'. [ 1568.964923][T21203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1572.488529][T21245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3392'. [ 1572.901143][T21247] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1572.901143][T21247] program syz.3.3393 not setting count and/or reply_len properly [ 1579.232774][T21305] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3405'. [ 1579.553749][T21311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1579.906778][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3411'. [ 1580.218934][T21319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 1583.400498][T21339] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3419'. [ 1584.284040][T21354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1584.294335][T21354] netlink: 'syz.3.3421': attribute type 5 has an invalid length. [ 1584.323696][T21354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1584.724560][T21354] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1584.733358][T21354] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1584.757734][T21354] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1584.784214][T21354] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1584.794391][T21354] geneve2: entered promiscuous mode [ 1584.799741][T21354] geneve2: entered allmulticast mode [ 1584.825828][T21359] binder: 21358:21359 ioctl c0306201 200000000080 returned -14 [ 1585.191562][ T30] audit: type=1400 audit(1746283270.772:1485): avc: denied { map } for pid=21358 comm="syz.4.3426" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1586.048593][ T30] audit: type=1400 audit(1746283270.812:1486): avc: denied { call } for pid=21358 comm="syz.4.3426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1587.341162][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1587.350206][T21377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1587.378812][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1587.397430][T21377] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3431'. [ 1588.874034][T21397] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1589.029598][T21397] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1589.709755][T21407] ubi: mtd0 is already attached to ubi31 [ 1590.017672][ T30] audit: type=1400 audit(1746283275.592:1487): avc: denied { ioctl } for pid=21408 comm="syz.1.3441" path="socket:[74116]" dev="sockfs" ino=74116 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1590.104109][T15899] IPVS: starting estimator thread 0... [ 1590.191601][T21412] IPVS: using max 41 ests per chain, 98400 per kthread [ 1590.331247][T21417] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1590.432767][T21417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1591.053588][T21424] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3444'. [ 1593.746675][T21449] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3452'. [ 1593.955753][T21452] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21452 comm=syz.2.3452 [ 1595.409062][T21456] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1595.409062][T21456] program syz.0.3455 not setting count and/or reply_len properly [ 1596.425781][T21467] Cannot find set identified by id 0 to match [ 1597.163197][T21480] Cannot find set identified by id 0 to match [ 1597.546243][T15900] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1598.131586][T15900] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1598.469461][T15900] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1598.749675][T15900] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1598.776139][T15893] libceph: connect (1)[c::]:6789 error -101 [ 1598.784301][T15893] libceph: mon0 (1)[c::]:6789 connect error [ 1598.812325][T15900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.934733][T21478] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1598.938086][T21508] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1599.020537][T21499] ceph: No mds server is up or the cluster is laggy [ 1599.141824][T15895] libceph: connect (1)[c::]:6789 error -101 [ 1599.147884][T15895] libceph: mon0 (1)[c::]:6789 connect error [ 1599.148376][T15900] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1599.164279][T21509] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21509 comm=syz.4.3468 [ 1600.832048][T21523] ubi: mtd0 is already attached to ubi31 [ 1602.611202][ T5900] usb 2-1: USB disconnect, device number 42 [ 1602.650306][T21536] xt_connbytes: Forcing CT accounting to be enabled [ 1602.657201][T21536] Cannot find set identified by id 0 to match [ 1603.422781][T21544] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3479'. [ 1603.461618][T21544] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21544 comm=syz.4.3479 [ 1603.482932][T21549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1603.982965][T21549] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21549 comm=syz.0.3480 [ 1604.145766][ T5808] Bluetooth: hci4: link tx timeout [ 1604.146001][T21557] binder: 21556:21557 ioctl c0306201 200000000080 returned -14 [ 1604.152311][ T5808] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1605.070485][ T5879] tipc: Subscription rejected, illegal request [ 1605.929026][T21576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3487'. [ 1605.974549][T21576] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1606.300710][T21576] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1606.340038][ T30] audit: type=1400 audit(1746283291.882:1488): avc: denied { firmware_load } for pid=21575 comm="syz.4.3487" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1606.541966][T21593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3492'. [ 1606.619338][T21593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21593 comm=syz.0.3492 [ 1606.692628][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 1606.970737][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1606.977032][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.219053][T21602] Cannot find set identified by id 0 to match [ 1608.480369][T21608] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1608.974015][T21617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3499'. [ 1611.286023][T21640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1612.287285][T21156] IPVS: starting estimator thread 0... [ 1612.642758][ T30] audit: type=1400 audit(1746283298.232:1489): avc: denied { create } for pid=21646 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 1613.134487][ T30] audit: type=1400 audit(1746283298.302:1490): avc: denied { bind } for pid=21646 comm="syz.1.3507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1613.154839][ C0] vkms_vblank_simulate: vblank timer overrun [ 1613.188618][T21647] IPVS: using max 46 ests per chain, 110400 per kthread [ 1613.205848][T21650] ubi: mtd0 is already attached to ubi31 [ 1617.335543][T21697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3520'. [ 1617.417482][ T30] audit: type=1400 audit(1746283302.982:1491): avc: denied { create } for pid=21693 comm="syz.4.3521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1618.287949][T21698] fuse: Unknown parameter '00000000000000000000' [ 1620.145376][T21704] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1620.145376][T21704] program syz.0.3524 not setting count and/or reply_len properly [ 1620.283984][T21726] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1620.325029][T21732] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1620.325029][T21732] program syz.4.3530 not setting count and/or reply_len properly [ 1620.399725][T21726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21726 comm=syz.3.3529 [ 1620.439975][T15895] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1620.637377][T15895] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1620.664976][T15895] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1621.126185][T15895] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1621.152988][T15895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1621.169388][T21724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1621.192266][T15895] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1622.015470][T21751] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3537'. [ 1623.576508][T19103] usb 2-1: USB disconnect, device number 43 [ 1623.681396][T21774] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3545'. [ 1623.722173][T21774] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21774 comm=syz.3.3545 [ 1624.315635][T21777] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1627.204670][T21156] libceph: connect (1)[c::]:6789 error -101 [ 1627.233751][T21156] libceph: mon0 (1)[c::]:6789 connect error [ 1627.921333][T21156] libceph: connect (1)[c::]:6789 error -101 [ 1628.224783][T21156] libceph: mon0 (1)[c::]:6789 connect error [ 1628.233402][T21824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1628.340333][T21806] ceph: No mds server is up or the cluster is laggy [ 1628.422612][T21824] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21824 comm=syz.0.3559 [ 1629.446097][T21831] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1629.446097][T21831] program syz.1.3558 not setting count and/or reply_len properly [ 1629.489908][T18957] IPVS: starting estimator thread 0... [ 1629.640283][T21838] IPVS: using max 77 ests per chain, 184800 per kthread [ 1629.822842][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1629.831734][T21841] netlink: 'syz.3.3563': attribute type 5 has an invalid length. [ 1629.839427][T21841] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3563'. [ 1630.078241][T21847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3564'. [ 1630.305362][T21849] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1630.305362][T21849] program syz.3.3565 not setting count and/or reply_len properly [ 1630.354301][T21843] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1630.354301][T21843] program syz.2.3562 not setting count and/or reply_len properly [ 1633.714850][T21874] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3575'. [ 1633.799236][T21874] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21874 comm=syz.0.3575 [ 1634.769415][T21882] sd 0:0:1:0: device reset [ 1635.580159][T19103] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1635.825287][T19103] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1635.862900][T19103] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1635.946262][T19103] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1635.952944][T21896] Cannot find set identified by id 0 to match [ 1636.187284][T19103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.228146][T21888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1636.255946][T19103] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1639.193867][T21921] ubi: mtd0 is already attached to ubi31 [ 1641.033423][T15895] usb 2-1: USB disconnect, device number 44 [ 1641.451738][T21934] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3589'. [ 1641.462721][T21938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1641.613905][T21943] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21943 comm=syz.4.3587 [ 1641.844622][T21952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3591'. [ 1643.393207][T21969] Cannot find set identified by id 0 to match [ 1644.238467][T21975] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1645.220273][T21975] overlayfs: conflicting options: metacopy=off,verity=on [ 1645.849287][T21994] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3604'. [ 1645.928429][T21994] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=21994 comm=syz.1.3604 [ 1647.397369][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'. [ 1647.765314][T22019] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1647.774417][T22019] netlink: 'syz.4.3611': attribute type 5 has an invalid length. [ 1647.782163][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1647.923093][T22021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3613'. [ 1648.830838][T22043] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3617'. [ 1648.935302][T22046] Cannot find set identified by id 0 to match [ 1651.366204][T22069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3626'. [ 1652.685513][T22073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1652.694444][T22073] netlink: 'syz.1.3627': attribute type 5 has an invalid length. [ 1652.702161][T22073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3627'. [ 1652.713787][T22073] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 1652.722406][T22073] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 1652.731091][T22073] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 1652.739669][T22073] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 1652.748610][T22073] geneve2: entered promiscuous mode [ 1652.753832][T22073] geneve2: entered allmulticast mode [ 1654.053575][T22094] ubi: mtd0 is already attached to ubi31 [ 1655.568918][T22107] Cannot find set identified by id 0 to match [ 1656.341259][T22106] sg_write: process 393 (syz.2.3639) changed security contexts after opening file descriptor, this is not allowed. [ 1656.404717][T22122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3641'. [ 1656.661262][T22124] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3642'. [ 1656.958226][T22137] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1656.958226][T22137] program syz.2.3646 not setting count and/or reply_len properly [ 1657.286232][T22138] xt_connbytes: Forcing CT accounting to be enabled [ 1657.293156][T22138] Cannot find set identified by id 0 to match [ 1657.630034][T22143] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3647'. [ 1657.998667][T22150] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3651'. [ 1658.011054][T22150] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22150 comm=syz.4.3651 [ 1658.105857][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3649'. [ 1658.146953][T22146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1658.181622][T22146] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1659.256759][T22160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3653'. [ 1660.388238][T22169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1660.719690][T22171] ubi: mtd0 is already attached to ubi31 [ 1662.708326][T22184] Cannot find set identified by id 0 to match [ 1662.974576][T22190] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3662'. [ 1663.219994][T22191] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1663.219994][T22191] program syz.4.3659 not setting count and/or reply_len properly [ 1663.256971][T22195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1663.292378][T22195] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22195 comm=syz.1.3663 [ 1666.173485][T22229] fuse: Unknown parameter '00000000000000000000' [ 1668.372794][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.379135][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.477195][T22238] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3676'. [ 1668.507028][T22238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22238 comm=syz.0.3676 [ 1668.809537][T22246] ubi: mtd0 is already attached to ubi31 [ 1669.406544][T22247] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1669.406544][T22247] program syz.4.3677 not setting count and/or reply_len properly [ 1669.661031][T22252] Cannot find set identified by id 0 to match [ 1671.454446][T22271] Cannot find set identified by id 0 to match [ 1673.415553][T22291] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1673.430458][T22294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3690'. [ 1673.890000][T19103] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1674.189807][T19103] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1675.000517][T19103] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1675.180599][T19103] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1675.189764][T19103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.243378][T22290] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1675.423116][T19103] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1676.747674][T22325] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1676.757095][T22325] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1676.767301][T22323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3700'. [ 1676.776264][T22325] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1676.924044][T22336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1678.324893][T21156] usb 1-1: USB disconnect, device number 32 [ 1678.370867][T22346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3705'. [ 1680.479019][T22371] Cannot find set identified by id 0 to match [ 1680.657453][T22373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1680.666507][T22373] netlink: 'syz.3.3708': attribute type 5 has an invalid length. [ 1680.680090][T22373] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3708'. [ 1683.855723][T22382] ubi: mtd0 is already attached to ubi31 [ 1684.300320][T18957] IPVS: starting estimator thread 0... [ 1684.419961][T22388] IPVS: using max 48 ests per chain, 115200 per kthread [ 1685.170049][T18957] IPVS: starting estimator thread 0... [ 1685.606157][T22405] IPVS: using max 77 ests per chain, 184800 per kthread [ 1685.918175][T22413] sd 0:0:1:0: device reset [ 1689.117763][T22439] Cannot find set identified by id 0 to match [ 1689.418977][T22445] fuse: Unknown parameter '00000000000000000000' [ 1690.230510][T22446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1690.239527][T22446] netlink: 'syz.4.3731': attribute type 5 has an invalid length. [ 1690.248095][T22446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3731'. [ 1690.960068][T15900] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 1691.141360][T22461] Cannot find set identified by id 0 to match [ 1691.186848][T15900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1691.321202][T15900] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1691.333699][T15900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.343595][T15900] usb 2-1: config 0 descriptor?? [ 1691.378083][T22454] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1691.587229][T22465] Cannot find set identified by id 0 to match [ 1692.007811][T15900] elan 0003:04F3:0755.000A: item fetching failed at offset 3/5 [ 1692.160203][T15900] elan 0003:04F3:0755.000A: Hid Parse failed [ 1693.189524][T15900] elan 0003:04F3:0755.000A: probe with driver elan failed with error -22 [ 1693.263811][T15900] usb 2-1: USB disconnect, device number 45 [ 1695.289968][ T5900] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 1696.735940][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1696.778765][ T5900] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1696.821430][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.822096][T22508] Cannot find set identified by id 0 to match [ 1697.014067][ T5900] usb 3-1: config 0 descriptor?? [ 1697.024821][T22499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1697.192481][T22512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1697.295766][T22510] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1697.295766][T22510] program syz.1.3751 not setting count and/or reply_len properly [ 1697.316829][T15895] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1697.479008][T22519] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1697.479008][T22519] program syz.3.3752 not setting count and/or reply_len properly [ 1697.647684][T15895] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1697.658981][T15895] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1697.824163][ T5900] elan 0003:04F3:0755.000B: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1697.835817][T15895] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1697.857318][T22524] x_tables: unsorted underflow at hook 2 [ 1698.010307][T15895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.336081][ T5900] usb 3-1: USB disconnect, device number 39 [ 1698.360228][T22507] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1698.458319][T15895] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1698.687286][T22528] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1698.687286][T22528] program syz.4.3756 not setting count and/or reply_len properly [ 1700.178981][T22545] x_tables: unsorted underflow at hook 2 [ 1701.576733][T22553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3762'. [ 1701.892276][ T5900] usb 1-1: USB disconnect, device number 33 [ 1703.882228][T22579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3769'. [ 1704.500853][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3771'. [ 1704.519019][T22588] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=22588 comm=syz.1.3771 [ 1705.808519][T22602] sd 0:0:1:0: device reset [ 1706.433171][ T30] audit: type=1400 audit(1746283392.022:1492): avc: denied { accept } for pid=22597 comm="syz.3.3775" lport=37037 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1706.458454][ T5808] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 1706.649404][ T30] audit: type=1400 audit(1746283392.022:1493): avc: denied { write } for pid=22597 comm="syz.3.3775" lport=37037 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1706.952291][ T30] audit: type=1400 audit(1746283392.022:1494): avc: denied { setopt } for pid=22597 comm="syz.3.3775" lport=37037 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1707.851513][T22614] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3779'. [ 1709.383825][T22631] Illegal XDP return value 38 on prog (id 825) dev N/A, expect packet loss! [ 1709.685084][T22634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3786'. [ 1710.876322][ T5808] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1710.885740][ T5808] Bluetooth: hci4: Injecting HCI hardware error event [ 1710.895999][ T5808] Bluetooth: hci4: hardware error 0x00 [ 1712.929998][ T5808] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1713.918290][T18957] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1714.086352][T18957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1714.399962][T18957] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1714.409296][T18957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.436460][T18957] usb 5-1: config 0 descriptor?? [ 1714.442228][T22679] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1715.191399][T18957] elan 0003:04F3:0755.000C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0 [ 1715.473502][T21156] usb 5-1: USB disconnect, device number 31 [ 1717.398583][T22716] sd 0:0:1:0: device reset [ 1717.797015][ T5821] non-paged memory [ 1717.802561][ T5821] list_del corruption, ffff888030973180->next is LIST_POISON1 (dead000000000100) [ 1717.814762][ T5821] ------------[ cut here ]------------ [ 1717.820229][ T5821] kernel BUG at lib/list_debug.c:56! [ 1717.826479][ T5821] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 1717.832895][ T5821] CPU: 0 UID: 0 PID: 5821 Comm: kworker/u9:7 Not tainted 6.15.0-rc4-syzkaller-00256-g95d3481af6dc #0 PREEMPT(full) [ 1717.845053][ T5821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1717.855094][ T5821] Workqueue: hci1 hci_conn_timeout [ 1717.860194][ T5821] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1717.867207][ T5821] Code: 48 c7 c7 20 86 f4 8b e8 ad 4b c4 fc 90 0f 0b 4c 89 e7 e8 02 13 28 fd 4c 89 e2 48 89 de 48 c7 c7 80 86 f4 8b e8 90 4b c4 fc 90 <0f> 0b 48 89 ef e8 e5 12 28 fd 48 89 ea 48 89 de 48 c7 c7 e0 86 f4 [ 1717.886804][ T5821] RSP: 0018:ffffc90004397b80 EFLAGS: 00010286 [ 1717.892844][ T5821] RAX: 000000000000004e RBX: ffff888030973180 RCX: ffffffff819a90e9 [ 1717.900788][ T5821] RDX: 0000000000000000 RSI: ffffffff819b0f76 RDI: 0000000000000005 [ 1717.908729][ T5821] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1717.916671][ T5821] R10: 0000000080000000 R11: fffffffffffc6138 R12: dead000000000100 [ 1717.924625][ T5821] R13: dffffc0000000000 R14: ffff88807faac618 R15: ffff888030973180 [ 1717.932578][ T5821] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 1717.941486][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1717.948046][ T5821] CR2: 0000001b31df7ff8 CR3: 0000000059a32000 CR4: 00000000003526f0 [ 1717.956005][ T5821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1717.963953][ T5821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1717.971900][ T5821] Call Trace: [ 1717.975154][ T5821] [ 1717.978059][ T5821] _hci_cmd_sync_cancel_entry.constprop.0+0x80/0x1d0 [ 1717.984725][ T5821] hci_cancel_connect_sync+0xfa/0x2b0 [ 1717.990075][ T5821] hci_abort_conn+0x15a/0x340 [ 1717.994725][ T5821] hci_conn_timeout+0x1a2/0x210 [ 1717.999547][ T5821] process_one_work+0x9cc/0x1b70 [ 1718.004470][ T5821] ? __pfx_process_one_work+0x10/0x10 [ 1718.009818][ T5821] ? assign_work+0x1a0/0x250 [ 1718.014390][ T5821] worker_thread+0x6c8/0xf10 [ 1718.018990][ T5821] ? __kthread_parkme+0x19e/0x250 [ 1718.024004][ T5821] ? __pfx_worker_thread+0x10/0x10 [ 1718.029099][ T5821] kthread+0x3c2/0x780 [ 1718.033146][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.037727][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.042299][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.046863][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.051428][ T5821] ? rcu_is_watching+0x12/0xc0 [ 1718.056170][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.060733][ T5821] ret_from_fork+0x45/0x80 [ 1718.065132][ T5821] ? __pfx_kthread+0x10/0x10 [ 1718.069694][ T5821] ret_from_fork_asm+0x1a/0x30 [ 1718.074453][ T5821] [ 1718.077450][ T5821] Modules linked in: [ 1718.081830][ T5821] ---[ end trace 0000000000000000 ]--- [ 1718.106752][ T5821] RIP: 0010:__list_del_entry_valid_or_report+0x121/0x200 [ 1718.115755][ T5821] Code: 48 c7 c7 20 86 f4 8b e8 ad 4b c4 fc 90 0f 0b 4c 89 e7 e8 02 13 28 fd 4c 89 e2 48 89 de 48 c7 c7 80 86 f4 8b e8 90 4b c4 fc 90 <0f> 0b 48 89 ef e8 e5 12 28 fd 48 89 ea 48 89 de 48 c7 c7 e0 86 f4 [ 1718.144187][ T5821] RSP: 0018:ffffc90004397b80 EFLAGS: 00010286 [ 1718.150270][ T5821] RAX: 000000000000004e RBX: ffff888030973180 RCX: ffffffff819a90e9 [ 1718.158228][ T5821] RDX: 0000000000000000 RSI: ffffffff819b0f76 RDI: 0000000000000005 [ 1718.166195][ T5821] RBP: dead000000000122 R08: 0000000000000005 R09: 0000000000000000 [ 1718.174175][ T5821] R10: 0000000080000000 R11: fffffffffffc6138 R12: dead000000000100 [ 1718.182691][ T5821] R13: dffffc0000000000 R14: ffff88807faac618 R15: ffff888030973180 [ 1718.190683][ T5821] FS: 0000000000000000(0000) GS:ffff8881249e1000(0000) knlGS:0000000000000000 [ 1718.199597][ T5821] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1718.206189][ T5821] CR2: 0000001b31deeff8 CR3: 000000003649a000 CR4: 00000000003526f0 [ 1718.214747][ T5821] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1718.222914][ T5821] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1718.231055][ T5821] Kernel panic - not syncing: Fatal exception [ 1718.237311][ T5821] Kernel Offset: disabled [ 1718.241623][ T5821] Rebooting in 86400 seconds..